diff --git a/dev/bench/data.js b/dev/bench/data.js
index 2d8be12f6..b09fd960a 100644
--- a/dev/bench/data.js
+++ b/dev/bench/data.js
@@ -1,5 +1,5 @@
 window.BENCHMARK_DATA = {
-  "lastUpdate": 1727801864487,
+  "lastUpdate": 1727802222487,
   "repoUrl": "https://github.com/pomerium/pomerium",
   "entries": {
     "Benchmark": [
@@ -125762,6 +125762,42 @@ window.BENCHMARK_DATA = {
             "extra": "176 times\n4 procs"
           }
         ]
+      },
+      {
+        "commit": {
+          "author": {
+            "email": "49699333+dependabot[bot]@users.noreply.github.com",
+            "name": "dependabot[bot]",
+            "username": "dependabot[bot]"
+          },
+          "committer": {
+            "email": "noreply@github.com",
+            "name": "GitHub",
+            "username": "web-flow"
+          },
+          "distinct": true,
+          "id": "4c052483da2b6cd5185cf448867de09536a128db",
+          "message": "chore(deps): bump the go group with 28 updates (#5312)\n\nBumps the go group with 28 updates:\r\n\r\n| Package | From | To |\r\n| --- | --- | --- |\r\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.30.5` | `1.31.0` |\r\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.27.32` | `1.27.39` |\r\n| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.61.1` | `1.63.3` |\r\n| [github.com/bits-and-blooms/bitset](https://github.com/bits-and-blooms/bitset) | `1.14.2` | `1.14.3` |\r\n| [github.com/docker/docker](https://github.com/docker/docker) | `27.2.0+incompatible` | `27.3.1+incompatible` |\r\n| [github.com/hashicorp/go-set/v3](https://github.com/hashicorp/go-set) | `3.0.0-alpha.1` | `3.0.0` |\r\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.6.0` | `5.7.1` |\r\n| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.9` | `1.17.10` |\r\n| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.76` | `7.0.77` |\r\n| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `0.68.0` | `0.69.0` |\r\n| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.2` | `1.20.4` |\r\n| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.58.0` | `0.60.0` |\r\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.29.0` | `1.30.0` |\r\n| [go.opentelemetry.io/otel/bridge/opencensus](https://github.com/open-telemetry/opentelemetry-go) | `1.29.0` | `1.30.0` |\r\n| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.29.0` | `1.30.0` |\r\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.29.0` | `1.30.0` |\r\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.29.0` | `1.30.0` |\r\n| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.29.0` | `1.30.0` |\r\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.29.0` | `1.30.0` |\r\n| [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.29.0` | `1.30.0` |\r\n| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.29.0` | `1.30.0` |\r\n| [go.uber.org/automaxprocs](https://github.com/uber-go/automaxprocs) | `1.5.3` | `1.6.0` |\r\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.26.0` | `0.27.0` |\r\n| [golang.org/x/net](https://github.com/golang/net) | `0.28.0` | `0.29.0` |\r\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.22.0` | `0.23.0` |\r\n| [golang.org/x/sys](https://github.com/golang/sys) | `0.24.0` | `0.25.0` |\r\n| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.196.0` | `0.199.0` |\r\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.66.0` | `1.67.0` |\r\n\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.30.5 to 1.31.0\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.30.5...v1.31.0)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.27.32 to 1.27.39\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.27.32...config/v1.27.39)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.61.1 to 1.63.3\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.61.1...service/s3/v1.63.3)\r\n\r\nUpdates `github.com/bits-and-blooms/bitset` from 1.14.2 to 1.14.3\r\n- [Release notes](https://github.com/bits-and-blooms/bitset/releases)\r\n- [Commits](https://github.com/bits-and-blooms/bitset/compare/v1.14.2...v1.14.3)\r\n\r\nUpdates `github.com/docker/docker` from 27.2.0+incompatible to 27.3.1+incompatible\r\n- [Release notes](https://github.com/docker/docker/releases)\r\n- [Commits](https://github.com/docker/docker/compare/v27.2.0...v27.3.1)\r\n\r\nUpdates `github.com/hashicorp/go-set/v3` from 3.0.0-alpha.1 to 3.0.0\r\n- [Release notes](https://github.com/hashicorp/go-set/releases)\r\n- [Commits](https://github.com/hashicorp/go-set/compare/v3.0.0-alpha.1...v3.0.0)\r\n\r\nUpdates `github.com/jackc/pgx/v5` from 5.6.0 to 5.7.1\r\n- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/jackc/pgx/compare/v5.6.0...v5.7.1)\r\n\r\nUpdates `github.com/klauspost/compress` from 1.17.9 to 1.17.10\r\n- [Release notes](https://github.com/klauspost/compress/releases)\r\n- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)\r\n- [Commits](https://github.com/klauspost/compress/compare/v1.17.9...v1.17.10)\r\n\r\nUpdates `github.com/minio/minio-go/v7` from 7.0.76 to 7.0.77\r\n- [Release notes](https://github.com/minio/minio-go/releases)\r\n- [Commits](https://github.com/minio/minio-go/compare/v7.0.76...v7.0.77)\r\n\r\nUpdates `github.com/open-policy-agent/opa` from 0.68.0 to 0.69.0\r\n- [Release notes](https://github.com/open-policy-agent/opa/releases)\r\n- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-policy-agent/opa/compare/v0.68.0...v0.69.0)\r\n\r\nUpdates `github.com/prometheus/client_golang` from 1.20.2 to 1.20.4\r\n- [Release notes](https://github.com/prometheus/client_golang/releases)\r\n- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.2...v1.20.4)\r\n\r\nUpdates `github.com/prometheus/common` from 0.58.0 to 0.60.0\r\n- [Release notes](https://github.com/prometheus/common/releases)\r\n- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)\r\n- [Commits](https://github.com/prometheus/common/compare/v0.58.0...v0.60.0)\r\n\r\nUpdates `go.opentelemetry.io/otel` from 1.29.0 to 1.30.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/bridge/opencensus` from 1.29.0 to 1.30.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.29.0 to 1.30.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.29.0 to 1.30.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.29.0 to 1.30.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/metric` from 1.29.0 to 1.30.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/sdk` from 1.29.0 to 1.30.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/sdk/metric` from 1.29.0 to 1.30.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/trace` from 1.29.0 to 1.30.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0)\r\n\r\nUpdates `go.uber.org/automaxprocs` from 1.5.3 to 1.6.0\r\n- [Release notes](https://github.com/uber-go/automaxprocs/releases)\r\n- [Changelog](https://github.com/uber-go/automaxprocs/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/uber-go/automaxprocs/compare/v1.5.3...v1.6.0)\r\n\r\nUpdates `golang.org/x/crypto` from 0.26.0 to 0.27.0\r\n- [Commits](https://github.com/golang/crypto/compare/v0.26.0...v0.27.0)\r\n\r\nUpdates `golang.org/x/net` from 0.28.0 to 0.29.0\r\n- [Commits](https://github.com/golang/net/compare/v0.28.0...v0.29.0)\r\n\r\nUpdates `golang.org/x/oauth2` from 0.22.0 to 0.23.0\r\n- [Commits](https://github.com/golang/oauth2/compare/v0.22.0...v0.23.0)\r\n\r\nUpdates `golang.org/x/sys` from 0.24.0 to 0.25.0\r\n- [Commits](https://github.com/golang/sys/compare/v0.24.0...v0.25.0)\r\n\r\nUpdates `google.golang.org/api` from 0.196.0 to 0.199.0\r\n- [Release notes](https://github.com/googleapis/google-api-go-client/releases)\r\n- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)\r\n- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.196.0...v0.199.0)\r\n\r\nUpdates `google.golang.org/grpc` from 1.66.0 to 1.67.0\r\n- [Release notes](https://github.com/grpc/grpc-go/releases)\r\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.66.0...v1.67.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: github.com/aws/aws-sdk-go-v2\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2/config\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/bits-and-blooms/bitset\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/docker/docker\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/hashicorp/go-set/v3\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/jackc/pgx/v5\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/klauspost/compress\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/minio/minio-go/v7\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/open-policy-agent/opa\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/prometheus/client_golang\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/prometheus/common\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/bridge/opencensus\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/metric\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/sdk\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/sdk/metric\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/trace\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.uber.org/automaxprocs\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/crypto\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/net\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/oauth2\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/sys\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/api\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/grpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
+          "timestamp": "2024-10-01T10:00:04-07:00",
+          "tree_id": "6c6b826f147e379e37586a6a87c16431bcb62867",
+          "url": "https://github.com/pomerium/pomerium/commit/4c052483da2b6cd5185cf448867de09536a128db"
+        },
+        "date": 1727802200313,
+        "tool": "go",
+        "benches": [
+          {
+            "name": "BenchmarkLoggedInUserAccess",
+            "value": 9897051,
+            "unit": "ns/op",
+            "extra": "126 times\n4 procs"
+          },
+          {
+            "name": "BenchmarkLoggedOutUserAccess",
+            "value": 6851947,
+            "unit": "ns/op",
+            "extra": "178 times\n4 procs"
+          }
+        ]
       }
     ]
   }